How much money are you losing because your emails aren’t being delivered?
Even when you’re the one sending it, an unprotected domain means invoices, proposals and follow-ups can quietly land in spam instead of the inbox — and you’ll never know why the reply never came.
You wouldn’t even know it’s happening — until it’s too late.
A scammer can send an email that looks exactly like it’s from you, and there’s no alert, no bounce-back, nothing telling you it happened — until a client calls asking why they paid a fake invoice.
Most businesses have no idea. Find out in 30 seconds, for free.
Right now, a scammer could send an email that looks exactly like it came from you — same name, same domain, landing straight in a client’s inbox. Not spam. Not obviously fake. Just an email that appears to be from your business, asking for a payment, a password, or a favour. Your client acts on it. When it goes wrong, it’s your name on it.
This isn’t rare. In our own DMARC testing at Security Everywhere, out of every 100 company domains we test, only around 2 score a full 5 out of 5. The rest — including, quite possibly, yours — are wide open.
Think of DMARC as passport control for your email domain — every email claiming to be from you has to prove it’s really you. Enter your email address below and we’ll test your domain’s DMARC setup in real time. You’ll get a score out of 5. A 5 means nobody can send email from your exact domain. A 4 still leaves a gap a determined scammer can use. Anything below 5 means there’s more to do, and we’ll show you exactly what.
Enter your email address below and hit the “check score” button.
A score of 5/5 is what you’re aiming for.
Watch: How a Scammer Can Send Emails As You — And the One Fix That Stops It
90-Day DMARC Enforcement Guarantee — Backed by Sendmarc
Once you’re set up on Sendmarc’s platform, they guarantee to get your domain to full protection (a locked-down “p=reject” policy) within 90 days. If it takes longer for reasons on their side, they keep working on it at no extra cost until it’s done.*
Francis West, our founder, has given over 500 cybersecurity talks to UK businesses in the last six years — unprotected domains like this are one of the most common gaps he sees.
*Guaranteed by Sendmarc, subject to your (and any third party’s) cooperation and access. Covers work within Sendmarc’s control — it’s not an automatic refund or credit unless agreed separately in writing.
Frequently Asked Questions
Why is my email going to spam or junk?
Your emails go to spam because scammers sending fake emails from your domain damage your sender reputation with providers like Gmail and Outlook — even though it isn’t you sending them. A proper DMARC setup stops this and protects your deliverability.
Why wasn’t my email delivered?
Your email usually isn’t delivered for one of two reasons: the receiving server didn’t trust your domain enough (a DMARC, SPF or DKIM gap), or it was flagged as suspicious for another reason. Running the free check below tells you which one it is for your domain.
What is DMARC and do I need it?
DMARC is the technical record that controls who’s allowed to send email as your domain, and what happens when someone who isn’t allowed tries. If your business sends email — client updates, invoices, anything — you need it, because without it anyone can impersonate you.
Can someone send emails pretending to be me or my business?
Yes, if your domain isn’t protected. It’s called email spoofing, and it’s simple to do — the scammer doesn’t need to hack your account, they just send an email with your domain in the “from” field. DMARC is what stops this working.
What does my score out of 5 actually mean?
Your score out of 5 shows how well protected your domain is against email impersonation. A 5 means nobody can send email that appears to come from your exact domain. It doesn’t cover lookalike domains or phishing in general, which need their own controls. A 4 is close, but still leaves a gap a determined attacker can exploit, and the lower the score, the easier it currently is for someone to send fake emails as you.
How long does it take to fix a low DMARC score?
Usually 30 to 90 days. It’s done through DNS record changes only — there’s no need to move your domain or hand over your registrar login. It’s a gradual, monitored process rather than a single flip of a switch, which is why it can’t be fixed overnight.
Whatever your score comes back as, that’s useful to know on its own — free, no obligation. If it’s lower than you’d like and you want a straight answer on what to do about it, get in touch.
